Facebook 'Like-jacking' Scams Expand

Facebook attacks that force users to unwittingly endorse scam pages keep spreading, researchers say. Attacks have now circulated that cause users to recommend pages promising naked pictures of alternative rock diva Hayley Williams or the phone number of heart-throb singer Justin Bieber. Read the...

CAPTCHAs Get the Botnet Beatdown

Botnets increasingly are creating phony online accounts on legitimate websites and online communities in order to steal information from enterprises. Merrick Furst, botnet expert and distinguished professor of computer science at Georgia Tech, says bots are showing up “en masse” to customer-facin...

Research: 1.3 Million Malicious Ads Viewed Daily

The true extent of the malvertizing scourge became much clearer this week with the release of new research by Dasient which shows that about 1.3 million malicious ads are being viewed online everyday, most pushing drive-by downloads and fake security software. Dancho Danchev sums up the findings...

Watch for Fake Twitter Support Malware

Almost a week ago, Twitter began warning its users about fake Twitter Support emails. Since then, a couple of variants of the email have surfaced, with small differences in the text “unreaded messages”, “information messages”. Read the full article. Help Net Security...

Fake AV Using Domain Rotation To Blast Users

In a report being released today, Google said that between January 2009 and the end of January 2010 it found some 11,000 malicious or hacked Web pages that attempted to foist fake anti-virus on visitors. Read the full article. KrebsonSecurity...

Trojan Malware In Fake Google Chrome Email

Miscreants have created a Trojan that poses as a Google Chrome extension. Spammed messages attempt to dupe prospective marks into trying an add-on that “helps you better organise your documents received in your email”. Read the full article. The Register...

Google to Release Findings on Fake AV

New research from Google underscores the breadth of fake antivirus operations on the Web. An analysis of 240 million Web pages collected by Google’s malware detection infrastructure over a 13-month period discovered more than 11,000 domains involved in the distribution of rogue antivirus AV. Read...

Ransomware Tactic Lures Via Copyright Scare

An ongoing ransomware campaign is pretending to be the fake ICPP Foundation icpp-online.com, where the ransomware locks down the user’s desktop issuing a “Copyright violation: copyrighted content detected” message which lists torrent files found on the infected PC and forces the user to pay $400...

Trellian FTP Client PASV Buffer Overflow

Exploit Title: Trellian FTP Client PASV BOF exploit Date: 2010-04-11 Author: zombiefx Software Link: http://www.trellian.com/bin/lu/dl/TrellianFTP.exe Version: Trellian FTP Client v 3.01 Tested on: Windows XP SP3 Usage: ./ftpserver.pl Acts as a fake ftp server that passes the vulnerable PASV...

Trellian FTP Client PASV BOF Exploit

Exploit for windows platform in category remote exploits ==================================== Trellian FTP Client PASV BOF Exploit ==================================== Exploit Title: Trellian FTP Client PASV BOF exploit Date: 2010-04-11 Author: zombiefx Software Link:...

Fake iPad, iPhone Giveaways Hit Twitter

Not surprisingly, spam using the Apple iPad as a lure to get users to give up personal or credit card information has began to make rounds of Twitter users. Read the full article. Help Net Security...

Trojan Watch: Fake eBay Security Email

A new blended email threat appears to be a security alert from eBay, said researchers. The email message with the subject line “eBay Procedural Warning – Security Alert,” is addressed to “Dear eBay Member,” and warns recipients that the sender has “detected security issues on behalf of your...

MS Warns of Rogue Antivirus 'Security Essentials'

Microsoft has warned Windows users to be on their guard against a piece of rogue antivirus software passing itself off as Microsoft Security Essentials. Security Essentials 2010 is a piece of software Microsoft said installs a fake virus scanner on your machine andmonitors and blocks processes it...

Another Twitter Phishing Attack with Video

Twitter users were being hit on Wednesday with what seems to be the second phishing attack this week, according to researchers. The latest attack features a message that says “This you????” followed by a link that leads to a fake Twitter log-in page. Read the full article. cnet...

Winter Olympic Search Results Exploited by Malware

Cybercriminals have been capitalizing on the world’s interest in the Winter Olympics in Vancouver to spread malware, experts warned. Attackers have been using Twitter and black hat search engine SEO optimization tactics to promote fake Olympics videos that are spreading malware. Read the full...

IRS Phishing Scam Targets Corporations

Fake emails claiming to be from the IRS are a variation of the usual IRS phishing expeditions that typically target end users during tax time, but this campaign aims to infect organizational machines through corporate rather than personal email. Read the full article. Infosecurity...

Mozilla Admits Malware Sneaked into Firefox Add-ons

Mozilla says a pair of malicious Firefox add-ons slipped by its security checks and infected approximately 4,600 Windows computers over the last five months. The browser add-ons, described my Mozilla as “experimental,” contained a Trojan horse that executed when Firefox started and infected the...

Beware of False Firefox Adware Site

Adware slingers have taken advantage of the buzz around the latest version of Firefox to establish a fake browser download site. Read the full article. The Register...

Threat Outbreak Alert: Fake Personal Photos Email Messages on January 18, 2010

Low Alert ID: 19740 First Published: 2010 January 19 19:22 GMT Last Updated: 2010 February 23 21:37 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam e-mail messages that claim the recipient has received personal photos.� The text in the e-mail message...

BIND 9 DNSSEC validation code could cause fake NXDOMAIN responses

Overview A vulnerability exists in the BIND 9 DNSSEC validation code that could be used by an attacker to generate fake NXDOMAIN responses. Description BIND 9 contains a vulnerability in DNSSEC validation code. According to ISC: There was an error in the DNSSEC NSEC/NSEC3 validation code that cou...